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In the claims: 

All of the claims standing for examination are reproduced below with appropriate status 
indication. 

1-28. (Canceled). 

29. (Currently amended) A wireless database management system, comprising: 

a first server providing a first virtual private network (VPN) manag e m e nt softwar e 
op e rating on at l e ast on e s e rv e r and providing Internet access to client-held wireless 
communication appliances, the VPN softwar e limiting access to a subset of the wireless 
communication appliances that subscribe to the VPN; and 

a second server providing a second VPN manag e m e nt softwar e op e rating on at 
l e ast on e s e rv e r with access to the Internet and providing access to one or more databases 
associated with the subscribing subset of wireless communication devices; 

wherein operation of the first and second VPN manag e m e nt softwar e creates a 
VPN tunnel in the Internet restricted to data addressed to or from the subscribing subset 
of wireless communication appliances. 

30. (Currently amended) The wireless database management system of claim 29 wherein 
the wireless communication appliances are one of a personal digital assistant (PDA), cell 
phone, two-way pager or other similar mobile, hand-held communication device. 

31. (Currently amended) The wireless database management system of claim 29 wherein 
the first virtual private network (VPN) management softwar e operating on at l e a s t on e the 
first server providing Internet access to client-held wireless communication appliances is 
a VPN-controlled wireless proxy server securing data transferred between the client-held 
wireless communication appliances and the Internet. 
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32. (Previously presented) The wireless database management system of claim 29, 
wherein the data transfers between the server providing Internet access to client-held 
wireless communication appliances are encrypted with a public key method. 

33. (Currently amended) The wireless database management system of claim 29, wherein 
the data transfers between the second server with access to the Internet and providing 
access to one or more databases associated with the subscribing subset of wireless 
communication devices are encrypted with a private key method. 

34. (Previously presented) The wireless database management system of claim 29, 
wherein users of the wireless communication appliances are authenticated before 
allowing access to the databases. 

35. (Currently amended) The wireless database management system of claim 29, wherein 
software is implemented on the second server with access to the Internet and providing 
access to one or more databases sets an adjustable timeout for connections between the 
wireless communication appliances and the server. 

36. (Currently amended) The wireless database management system of claim 35, wherein 
the second server identifies a session between the wireless communication appliances and 
the second server with a session identification phrase, and storing the session 
identification phrase in memory. 

37. (Currently amended) The wireless database management system of claim 29, wherein 
a firewall is implemented between the Internet and the second server connected to the 
databases, thereby limiting access to IP addresses of the wireless communication devices. 

38. (Currently amended) The wireless database management system of claim 37, wherein 
a second firewall is implemented between the second server and the databases. 



39. (Currently amended) A method for securing data transfers in a wireless database 
management system, comprising steps of: 

a) providing first server including a virtual private network (VPN) manag e m e nt 
softwar e operating on at l e ast on e s e rv e r and providing Internet access to client-held 
wireless communication appliances, the VPN software limiting access to a subset of the 
wireless communication appliances that subscribe to the VPN; and 

b) providing a second server including a VPN manag e m e nt softwar e op e rating on 
at l e ast on e se rv e r with access to the Internet and providing access to one or more 
databases associated with the subscribing subset of wireless communication devices; and 

c) operating the first and second server VPNs manag e m e nt softwar e creating to 
create a VPN tunnel in the Internet restricted to data addressed to or from the subscribing 
subset of wireless communication appliances. 

40. (Previously presented) The method of claim 39, wherein the wireless communication 
appliances are one of a personal digital assistant (PDA), cell phone, two-way pager or 
other similar device. 

41 . (Currently amended) The method of claim 39 wherein in step a), the first virtual 
privat e n e twork (VPN) manag e m e nt softwar e op e rating on at l e a s t on e first server 
providing Internet access to client-held wireless communication appliances is a VPN- 
controlled wireless proxy server securing data transferred between the client-held wireless 
communication appliances and the Internet. 

42. (Currently amended) The method of claim 39 wherein in step a) the data transfers 
between the first server providing Internet access to client-held wireless communication 
appliances are encrypted with a public key method. 



43. (Currently amended) The method of claim 39 wherein in step b), the data transfers 
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between the second server with access to the Internet and providing access to one or more 
databases associated with the subscribing subset of wireless communication devices are 
encrypted with a private key method. 

44. (Previously presented) The method of claim 39, further providing a step of 
authenticating users of the wireless communication appliances before allowing access to 
the databases. 

45. (Currently amended) The method of claim 39 wherein in step b) an adjustable 
timeout is provided for connections between the wireless communication appliances and 
the second server. 

46. (Currently amended) The method of claim 39, further providing a step for identifying 
a session between the first server and the wireless communication appliances of step a) 
with a session identification phrase, and storing the session identification phrase in 
memory. 

47. (Currently amended) The method of claim 39 wherein in step b) a firewall is 
provided between the Internet and the second server connected to the databases, thereby 
limiting access to IP addresses of the wireless communication devices. 

48. (Currently amended) The method of claim 47 wherein a second firewall is 
implemented between the second server and the databases. 



